CWE-640 · Weak Password Recovery Mechanism for Forgotten Password (page 3)
Page 3 of 4 — CVEs classified under CWE-640, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29933 | High | 8.8 | 2022-05-09 | Craft CMS through 3.7.36 allows a remote unauthenticated attacker, who knows at least one valid username, to reset the account's password and take over the acc… |
CVE-2022-24892 | Medium | 6.4 | 2022-04-28 | Shopware is an open source e-commerce software platform. Starting with version 5.0.4 and before version 5.7.9, multiple tokens for password reset can be reques… |
CVE-2022-27157 | Critical | 9.8 | 2022-04-15 | pearweb < 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php. |
CVE-2021-43498 | High | 7.5 | 2022-04-08 | An Access Control vulnerability exists in ATutor 2.2.4 in password_reminder.php when the g, id, h, form_password_hidden, and form_change HTTP POST parameters a… |
CVE-2022-1073 | High | 7.3 | 2022-03-29 | A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can… |
CVE-2022-0777 | High | 7.5 | 2022-03-01 | Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3. |
CVE-2022-23619 | Medium | 5.3 | 2022-02-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user… |
CVE-2021-27654 | High | 7.8 | 2022-01-28 | Forgotten password reset functionality for local accounts can be used to bypass local authentication checks. |
CVE-2022-23855 | Critical | 9.8 | 2022-01-24 | An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An authentication bypass in ECM/maintenance/forgotpasswordstep1 allows an unauthe… |
CVE-2021-44839 | Medium | 6.5 | 2022-01-18 | An issue was discovered in Delta RM 1.2. It is possible to request a new password for any other account using the account ID. Using the /listes/DTsendmaildata/… |
CVE-2022-22691 | Medium | 6.8 | 2022-01-18 | The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be po… |
CVE-2021-39919 | Medium | 4.4 | 2021-12-13 | In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5… |
CVE-2021-44037 | High | 7.5 | 2021-11-19 | Team Password Manager (aka TeamPasswordManager) before 10.135.236 allows password-reset poisoning. |
CVE-2021-39899 | Low | 2.9 | 2021-10-04 | In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. The… |
CVE-2021-25961 | High | 8.0 | 2021-09-29 | In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a d… |
CVE-2021-36095 | Medium | 5.3 | 2021-09-06 | Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6… |
CVE-2021-25957 | High | 8.8 | 2021-08-17 | In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low privileged attacker can reset the passw… |
CVE-2021-37693 | Medium | 5.3 | 2021-08-13 | Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an… |
CVE-2021-37541 | Medium | 6.1 | 2021-08-06 | In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible. |
CVE-2021-36708 | High | 7.5 | 2021-08-06 | In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the password to the administrative interfa… |
CVE-2021-36209 | Critical | 9.8 | 2021-08-06 | In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset. |
CVE-2021-36804 | Medium | 5.4 | 2021-08-04 | Akaunting version 2.1.12 and earlier suffers from a password reset spoofing vulnerability, wherein an attacker can proxy password reset requests through a runn… |
CVE-2021-33321 | High | 7.5 | 2021-08-03 | Insecure default configuration in Liferay Portal 6.2.3 through 7.3.2, and Liferay DXP before 7.3, allows remote attackers to enumerate user email address via t… |
CVE-2021-22763 | Critical | 9.8 | 2021-06-11 | A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLog… |
CVE-2021-28293 | Critical | 9.8 | 2021-06-08 | Seceon aiSIEM before 6.3.2 (build 585) is prone to an unauthenticated account takeover vulnerability in the Forgot Password feature. The lack of correct config… |
CVE-2021-22731 | Critical | 9.8 | 2021-05-26 | Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior which could cause an… |
CVE-2021-31912 | High | 8.8 | 2021-05-11 | In JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset. |
CVE-2021-28128 | High | 8.1 | 2021-05-06 | In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password. An attacker who gains access to a val… |
CVE-2021-29080 | High | 8.1 | 2021-03-23 | Certain NETGEAR devices are affected by password reset by an unauthenticated attacker. This affects RBK852 before 3.2.10.11, RBK853 before 3.2.10.11, RBR854 be… |
CVE-2021-25323 | Critical | 9.1 | 2021-01-19 | The default setting of MISP 2.4.136 did not enable the requirements (aka require_password_confirmation) to provide the previous password when changing a passwo… |
CVE-2020-5361 | Medium | 5.1 | 2021-01-04 | Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who forget their… |
CVE-2020-28186 | High | 7.3 | 2020-12-24 | Email Injection in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to abuse the forget password functionality and achieve account takeover. |
CVE-2020-27408 | High | 7.5 | 2020-12-04 | OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change… |
CVE-2020-27179 | Critical | 9.8 | 2020-10-27 | konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting password-reset tokens. |
CVE-2020-25728 | High | 8.8 | 2020-09-17 | The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malicious user to change any user's account p… |
CVE-2020-25105 | Critical | 9.8 | 2020-09-03 | eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities). |
CVE-2020-14016 | Medium | 5.3 | 2020-06-24 | An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the emai… |
CVE-2020-14015 | High | 7.5 | 2020-06-24 | An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their passw… |
CVE-2020-11027 | Medium | 6.1 | 2020-04-30 | In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email… |
CVE-2019-6560 | Critical | 9.1 | 2020-03-23 | In Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App), the software contains a mechanism for users… |
CVE-2012-5686 | Critical | 9.8 | 2020-02-04 | ZPanel 10.0.1 has insufficient entropy for its password reset process. |
CVE-2012-5618 | Critical | 9.8 | 2020-02-04 | Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens. |
CVE-2020-7245 | Critical | 9.8 | 2020-01-23 | Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an arbitrary account if the username is known… |
CVE-2009-5025 | High | 7.5 | 2020-01-15 | A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on behalf of that user. |
CVE-2019-20004 | High | 8.8 | 2020-01-05 | An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain client IP address, administrative autho… |
CVE-2019-19844 | Critical | 9.8 | 2019-12-18 | Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's em… |
CVE-2019-17392 | Critical | 9.8 | 2019-11-26 | Progress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because the HTTP Host header is mishandled. |
CVE-2019-18818 | Critical | 9.8 | 2019-11-07 | strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controll… |
CVE-2019-15929 | Critical | 9.8 | 2019-10-24 | In Craft CMS through 3.1.7, the elevated session password prompt was not being rate limited like normal login forms, leading to the possibility of a brute forc… |
CVE-2019-15749 | Medium | 6.5 | 2019-10-07 | SITOS six Build v6.2.1 allows a user to change their password and recovery email address without requiring them to confirm the change with their old password… |
CVE-2019-14955 | Medium | 5.3 | 2019-10-01 | In JetBrains Hub versions earlier than 2018.4.11436, there was no option to force a user to change the password and no password expiration policy was implement… |
CVE-2019-12943 | High | 8.1 | 2019-09-10 | TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive information about valid accoun… |
CVE-2019-13240 | Medium | 5.9 | 2019-07-10 | An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next… |
CVE-2019-10270 | High | 8.8 | 2019-06-21 | An arbitrary password reset issue was discovered in the Ultimate Member plugin 2.39 for WordPress. It is possible (due to lack of verification and correlation… |
CVE-2019-3787 | High | 8.3 | 2019-06-19 | Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does no… |
CVE-2019-12476 | Medium | 6.8 | 2019-06-17 | An authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine ADSelfService Plus before 5.0.6 allows an attacker with physica… |
CVE-2018-16988 | Critical | 9.8 | 2019-05-02 | An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A brute-force a… |
CVE-2019-11414 | High | 8.8 | 2019-04-22 | An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is changed from a certain client IP address, administrative autho… |
CVE-2019-11393 | Critical | 9.8 | 2019-04-22 | An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by reques… |
CVE-2019-10641 | Critical | 9.8 | 2019-04-17 | Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password. |
CVE-2018-16529 | Critical | 9.8 | 2019-03-28 | A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period… |
CVE-2018-19488 | Critical | 9.8 | 2019-03-21 | The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_reset_pass() function through the admin-ajax.php file, whi… |
CVE-2018-0696 | High | 7.5 | 2019-02-13 | OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and… |
CVE-2018-18871 | Critical | 9.8 | 2018-12-20 | Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (in the same network… |
CVE-2018-1000812 | High | 8.1 | 2018-12-20 | Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerabil… |
CVE-2018-12315 | Medium | 6.5 | 2018-12-04 | Missing verification of a password in ASUSTOR ADM version 3.1.1 allows attackers to change account passwords without entering the current password. |
CVE-2018-7811 | Critical | 9.8 | 2018-11-30 | An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an u… |
CVE-2018-7809 | Critical | 9.8 | 2018-11-30 | An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an u… |
CVE-2018-17881 | Critical | 9.8 | 2018-10-03 | On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password c… |
CVE-2018-17401 | High | 8.8 | 2018-09-23 | The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover attacks by exploiting i… |
CVE-2018-17298 | Critical | 9.8 | 2018-09-21 | An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user changes its password. |
CVE-2018-12579 | High | 8.1 | 2018-08-20 | An issue was discovered in OXID eShop Enterprise Edition before 5.3.8, 6.0.x before 6.0.3, and 6.1.x before 6.1.0; Professional Edition before 4.10.8, 5.x and… |
CVE-2017-2614 | Medium | 6.8 | 2018-07-27 | When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired. Thi… |
CVE-2017-0921 | High | 8.1 | 2018-07-03 | GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController com… |
CVE-2018-1000554 | Critical | 9.8 | 2018-06-26 | Trovebox version <= 4.0.0-rc6 contains a Unsafe password reset token generation vulnerability in user component that can result in Password reset. This attack… |
CVE-2018-1000501 | Critical | 9.8 | 2018-06-26 | Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tack… |
CVE-2018-12421 | Critical | 9.8 | 2018-06-14 | LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old password) via a crafted POST request, beca… |
CVE-2018-8916 | Medium | 6.3 | 2018-06-08 | Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to reset p… |
CVE-2018-11134 | High | 8.8 | 2018-05-31 | In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs wit… |
CVE-2018-10210 | Medium | 5.3 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. Enumeration of users is possible through the password-reset feature. |
CVE-2018-10081 | Critical | 9.8 | 2018-04-13 | CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beg… |
CVE-2014-6412 | High | 8.1 | 2018-04-12 | WordPress before 4.4 makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach. |
CVE-2018-0787 | High | 8.8 | 2018-03-14 | ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests… |
CVE-2017-12161 | High | 8.8 | 2018-02-21 | It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker cou… |
CVE-2017-8916 | High | 7.8 | 2018-01-31 | In Center for Internet Security CIS-CAT Pro Dashboard before 1.0.4, an authenticated user is able to change an administrative user's e-mail address and send a… |
CVE-2017-1000141 | Medium | 6.5 | 2018-01-30 | An issue was discovered in Mahara before 18.10.0. It mishandled user requests that could discontinue a user's ability to maintain their own account (changing u… |
CVE-2017-17097 | Critical | 9.8 | 2018-01-02 | gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and th… |
CVE-2015-5172 | Critical | 9.8 | 2017-10-24 | Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified… |
CVE-2017-14005 | High | 8.8 | 2017-10-17 | An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a new password for a user, the applicatio… |
CVE-2015-4689 | Critical | 9.8 | 2017-09-11 | Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password… |
CVE-2015-7257 | High | 7.5 | 2017-08-24 | ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by… |
CVE-2017-7551 | Critical | 9.8 | 2017-08-16 | 389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on… |
CVE-2017-12851 | High | 8.8 | 2017-08-14 | An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46. |
CVE-2017-12850 | High | 8.8 | 2017-08-14 | An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before 1.0.46. |
CVE-2017-8613 | High | 8.1 | 2017-06-29 | Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-pre… |
CVE-2017-7629 | High | 7.5 | 2017-06-15 | QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function. |
CVE-2017-9543 | High | 7.5 | 2017-06-12 | register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresu… |
CVE-2017-7731 | High | 7.5 | 2017-05-27 | A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten P… |
CVE-2015-3189 | Low | 3.7 | 2017-05-25 | With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions 2.2.5 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, ol… |
CVE-2017-8295 | Medium | 5.9 | 2017-05-04 | WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passw… |